nonprofitcentral.amazon.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:2d:c8:8e:6b:a4:be:da:fb:ef:de:9a:c9:37:1b:07 was issued on by Amazon.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nonprofitcentral.amazon.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:2d:c8:8e:6b:a4:be:da:fb:ef:de:9a:c9:37:1b:07
Serial Number (int): 16188457073686926252226933010489350919
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 05:1b:a1:f9:d9:ef:39:ed:db:25:fd:09:f3:84:2e:56:95:79:7d:c4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 80:cc:67:37:eb:0b:d1:b0:f1:3e:9d:f4:21:f8:6e:15:eb:9e:10:9e
Fingerprint (sha256): 3c:9b:66:c9:a0:59:c8:97:dd:de:e7:09:17:05:c1:6c:fd:f7:56:cf:fa:42:c8:bc:b3:53:64:09:f3:7a:b9:2e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate nonprofitcentral.amazon.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nonprofitcentral.amazon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nonprofitcentral.amazon.com
www.sothebys.amazon.com
amazonservices.de
www.livebid.com
localamazon.com
zshops.com
toronto.amazon.com
amazongamesstudio.com
amazon.livebid.com
toronto.amazon.ca
www.warehouse-deals.com
associates-blog.amazon.de
nonprofit.amazon.com
yourstore.amazon.com
booksurgepages.net
honorsystem.com
associates-blog.amazon.com
www.amapedia.com
www.livebid.amazon.com
kaidian.amazon.com
www.localamazon.com
honoursystem.amazon.com
www.mturk.amazon.com
www.amazongamestudios.com
livebid.amazon.com
gregmanning.amazon.com
www.filmfinders.com
affiliate-blog.amazon.com
www.kdp.com
filmfinders.com
www.honorsystem.amazon.com
www.booksurgepages.net
www.amazonservices.de
www.amazongamesstudios.com
requestor.mturk.amazon.com
www.honorsystem.com
partenaires-blog.amazon.fr
amazondcn.com
warehouse-deals.com
fba.amazon.co.jp
amazongamestudios.com
www.honoursystem.amazon.com
amazongamesstudios.com
www.orgcentral.amazon.com
www.charities.amazon.com
www.amazonlocal.com
feeds.amazon.com
orgs.amazon.com
livebid.com
www.mechturk.com
www.fba.amazon.com
nonprofits.amazon.com
amazongamestudio.com
amazonlocal.com
warehousedeals.amazon.com
organization.amazon.com
www.amazongamestudio.com
honorsystem.amazon.com
mturk.amazon.com
mechturk.com
www.amazongamesstudio.com
www.nonprofits.amazon.com
sothebysauction.amazon.com
associates-blog.amazon.fr
www.charitycentral.amazon.com
orgcentral.amazon.com
requester.mturk.amazon.com
kdp.com
partner-blog.amazon.de
zshops.amazon.com
vancouver.amazon.ca
mechanicalturk.com
zshop.com
www.fba.amazon.co.jp
vancouver.amazon.com
partnerprogramm-blog.amazon.de
ats.amazon.com
www.nonprofit.amazon.com
www.organizations.amazon.com
sothebyssearch.amazon.com
organizations.amazon.com
fba.amazon.com
sothebys.amazon.com
www.gregmanning.amazon.com
fba.amazon.jp

Other certificates including the domain name amazon.com

(limited to 100 certificates)
fresh.amazon.com
aea-console-canary.aea.amazon.com
charlie-kernel-console-alpha.aws.amazon.com
ap-southeast-1.console.aws.amazon.com
routingtools-jlb-l-dub.dub.proxy.amazon.com
us-west-1.awsc-integ.aws.amazon.com
aea-console-canary.aea.amazon.com
d2ysdk431fhvtm.cloudfront.net
check.integ.aftx.amazon.com
iq-test.console.aws.amazon.com
forums.aws.amazon.com
aea-console-canary.aea.amazon.com
ldap.cpt.amazon.com
bom-s-orca.amazon.com
media-service-fe.amazon.com
aea-console-canary.aea.amazon.com
a4k.amazon.com
d336t989k2uvmt.cloudfront.net
*.stage-business.amazon.com
smartshelf-productfinder.amazon.com
brickviewer-gamma.corp.amazon.com
beta.amazongames.com
aea-console-canary.aea.amazon.com
aea-console-canary.aea.amazon.com
umass.amazon.com
rds-access-syd.corp.amazon.com
aea-console-canary.aea.amazon.com
readynow-agg-preprod-eu.amazon.com
locard-alpha.corp.amazon.com
lender-central-eu.dub.amazon.com
bitrium-na.amazon.com
emf-operator-console-prod-sin-cell2.corp.amazon.com
aea-console-canary.aea.amazon.com
kindlepublishing.amazon.com
mrwiz-nrt-prod.corp.amazon.com
accesspoints-api-na.amazon.com
harbor-cn.amazon.com
firs-ta-g7g-preprod.amazon.com
firmware.hkg.amazon.com
zappos-ask-na.amazon.com
mas-ext.amazon.com
aax-eu.amazon.com
aea-console-canary.aea.amazon.com
registrar-website-backend-gamma.amazon.com
fra-w-orca.amazon.com
otsms-na-master-extern.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
tmga.aea.amazon.com
syd-g-orca.amazon.com
bob-dispatch-preprod-eu.amazon.com
cpt-b-orca.amazon.com
ap-east-1.signin.aws
grappler.corp.amazon.com
ap-southeast-1.signin.aws
match-visualsearch-it.amazon.com
rewrite-ssl.amazon.com
preview-flex-capacity-jp.amazon.com
echoheaders.amazon.com
occentral-preprod.integ.amazon.com
edge-customer-troubleshooting.amazon.com
pharmacy.amazon.com
fls-na.amazon.com
tmga.aea.amazon.com
foxhound.amazon.com
logistics-platform-preprod.amazon.com
aftlite-portal-eu.amazon.com
es-preprod-aw.amazon.com
shm.amazon.com
devicemessaging-preprod.us-east-1.amazon.com
daols-opf-eu.amazon.com
fctools.corp.amazon.com
recordprep-aftx.dub.amazon.com
paragon-eu.amazon.com
advertising-api-test.amazon.com
aea-console-canary.aea.amazon.com
org.amazon.com
sars-cn.amazon.com
aea-console-canary.aea.amazon.com
a.cdn.haileygu.console-alpha.aws-dev.amazon.com
ca-central-1.beta.acm-certificates.amazon.com
pay-api.amazon.com
match-visualsearch-in.amazon.com
warpspeed.eu-west-1.aws.amazon.com
dcs-envy-ui-gamma.corp.amazon.com
taapi-ui-alpha.corp.amazon.com
amp.aka.amazon.com
tmga.aea.amazon.com
merch-eu.amazon.com
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
tmga.aea.amazon.com
flashui-alpha-na.integ.amazon.com
dp-rsm-preprod.amazon.com
emf-operator-console-prod-sin-cell3.corp.amazon.com
lab-central.amazon.com
cs-ext-eu-preprod.amazon.com
raven.studios.a2z.amazon.com
dp-rsm-prod.amazon.com
adg-order-eu.amazon.com

Certificate

The complete raw certificate details for nonprofitcentral.amazon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILxTCCCq2gAwIBAgIQDC3Ijmukvtr7796ayTcbBzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAxMjgwMDAwMDBaFw0yMzAyMjYy
MzU5NTlaMCYxJDAiBgNVBAMTG25vbnByb2ZpdGNlbnRyYWwuYW1hem9uLmNvbTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKFe5x1pZVGw7RRnR8VJjiQj
GFG+jNH8UmuJEYZW/pKNxfC9A1XZ6YfqvrCKxM4lcS/sSRxdI8AN6OEaTzyO8Ozw
z8QLNLCJY+LA95JXtmNgiB4UTTe57kBilSnronrLQ906eUgqRiuY1VS0r6A6hIRG
SjJNQRMp9Qv84fM9Xv2NRjSn1GQjxKwoDPBkaIWYvWm4y5zFnDwAPBiwj2ThW2AO
CLNVeCjbjultakmdPZ1iAA8ImFN+hO0LTTNJVPhH0ej1rWPbMoM5Y4E2QrT8y4yC
yidzMv1DkIuzGswGmR5v4icfuGOwKBn09sHkoprQFQsUJ3fUKqy+KDm+mnCdXNEC
AwEAAaOCCM0wggjJMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0G
A1UdDgQWBBQFG6H52e857dsl/QnzhC5WlXl9xDCCB2gGA1UdEQSCB18wggdbghtu
b25wcm9maXRjZW50cmFsLmFtYXpvbi5jb22CF3d3dy5zb3RoZWJ5cy5hbWF6b24u
Y29tghFhbWF6b25zZXJ2aWNlcy5kZYIPd3d3LmxpdmViaWQuY29tgg9sb2NhbGFt
YXpvbi5jb22CCnpzaG9wcy5jb22CEnRvcm9udG8uYW1hem9uLmNvbYIVYW1hem9u
Z2FtZXNzdHVkaW8uY29tghJhbWF6b24ubGl2ZWJpZC5jb22CEXRvcm9udG8uYW1h
em9uLmNhghd3d3cud2FyZWhvdXNlLWRlYWxzLmNvbYIZYXNzb2NpYXRlcy1ibG9n
LmFtYXpvbi5kZYIUbm9ucHJvZml0LmFtYXpvbi5jb22CFHlvdXJzdG9yZS5hbWF6
b24uY29tghJib29rc3VyZ2VwYWdlcy5uZXSCD2hvbm9yc3lzdGVtLmNvbYIaYXNz
b2NpYXRlcy1ibG9nLmFtYXpvbi5jb22CEHd3dy5hbWFwZWRpYS5jb22CFnd3dy5s
aXZlYmlkLmFtYXpvbi5jb22CEmthaWRpYW4uYW1hem9uLmNvbYITd3d3LmxvY2Fs
YW1hem9uLmNvbYIXaG9ub3Vyc3lzdGVtLmFtYXpvbi5jb22CFHd3dy5tdHVyay5h
bWF6b24uY29tghl3d3cuYW1hem9uZ2FtZXN0dWRpb3MuY29tghJsaXZlYmlkLmFt
YXpvbi5jb22CFmdyZWdtYW5uaW5nLmFtYXpvbi5jb22CE3d3dy5maWxtZmluZGVy
cy5jb22CGWFmZmlsaWF0ZS1ibG9nLmFtYXpvbi5jb22CC3d3dy5rZHAuY29tgg9m
aWxtZmluZGVycy5jb22CGnd3dy5ob25vcnN5c3RlbS5hbWF6b24uY29tghZ3d3cu
Ym9va3N1cmdlcGFnZXMubmV0ghV3d3cuYW1hem9uc2VydmljZXMuZGWCGnd3dy5h
bWF6b25nYW1lc3N0dWRpb3MuY29tghpyZXF1ZXN0b3IubXR1cmsuYW1hem9uLmNv
bYITd3d3Lmhvbm9yc3lzdGVtLmNvbYIacGFydGVuYWlyZXMtYmxvZy5hbWF6b24u
ZnKCDWFtYXpvbmRjbi5jb22CE3dhcmVob3VzZS1kZWFscy5jb22CEGZiYS5hbWF6
b24uY28uanCCFWFtYXpvbmdhbWVzdHVkaW9zLmNvbYIbd3d3Lmhvbm91cnN5c3Rl
bS5hbWF6b24uY29tghZhbWF6b25nYW1lc3N0dWRpb3MuY29tghl3d3cub3JnY2Vu
dHJhbC5hbWF6b24uY29tghh3d3cuY2hhcml0aWVzLmFtYXpvbi5jb22CE3d3dy5h
bWF6b25sb2NhbC5jb22CEGZlZWRzLmFtYXpvbi5jb22CD29yZ3MuYW1hem9uLmNv
bYILbGl2ZWJpZC5jb22CEHd3dy5tZWNodHVyay5jb22CEnd3dy5mYmEuYW1hem9u
LmNvbYIVbm9ucHJvZml0cy5hbWF6b24uY29tghRhbWF6b25nYW1lc3R1ZGlvLmNv
bYIPYW1hem9ubG9jYWwuY29tghl3YXJlaG91c2VkZWFscy5hbWF6b24uY29tghdv
cmdhbml6YXRpb24uYW1hem9uLmNvbYIYd3d3LmFtYXpvbmdhbWVzdHVkaW8uY29t
ghZob25vcnN5c3RlbS5hbWF6b24uY29tghBtdHVyay5hbWF6b24uY29tggxtZWNo
dHVyay5jb22CGXd3dy5hbWF6b25nYW1lc3N0dWRpby5jb22CGXd3dy5ub25wcm9m
aXRzLmFtYXpvbi5jb22CGnNvdGhlYnlzYXVjdGlvbi5hbWF6b24uY29tghlhc3Nv
Y2lhdGVzLWJsb2cuYW1hem9uLmZygh13d3cuY2hhcml0eWNlbnRyYWwuYW1hem9u
LmNvbYIVb3JnY2VudHJhbC5hbWF6b24uY29tghpyZXF1ZXN0ZXIubXR1cmsuYW1h
em9uLmNvbYIHa2RwLmNvbYIWcGFydG5lci1ibG9nLmFtYXpvbi5kZYIRenNob3Bz
LmFtYXpvbi5jb22CE3ZhbmNvdXZlci5hbWF6b24uY2GCEm1lY2hhbmljYWx0dXJr
LmNvbYIJenNob3AuY29tghR3d3cuZmJhLmFtYXpvbi5jby5qcIIUdmFuY291dmVy
LmFtYXpvbi5jb22CHnBhcnRuZXJwcm9ncmFtbS1ibG9nLmFtYXpvbi5kZYIOYXRz
LmFtYXpvbi5jb22CGHd3dy5ub25wcm9maXQuYW1hem9uLmNvbYIcd3d3Lm9yZ2Fu
aXphdGlvbnMuYW1hem9uLmNvbYIZc290aGVieXNzZWFyY2guYW1hem9uLmNvbYIY
b3JnYW5pemF0aW9ucy5hbWF6b24uY29tgg5mYmEuYW1hem9uLmNvbYITc290aGVi
eXMuYW1hem9uLmNvbYIad3d3LmdyZWdtYW5uaW5nLmFtYXpvbi5jb22CDWZiYS5h
bWF6b24uanAwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpv
bnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1Bggr
BgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpv
bnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250
cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB
/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAA/38YrN0WpCztUH9bwTyndK7LStijEA
6f6uxMe8jsxiVfu9X1Z619TEHZ7Y2wB4t166H8dLHHsL9nNGhFYqJXy9GvizHsk9
cX6gHtlp/UQn+yu/6EWzWy92WvkRzPJNOps6L75MHqebQEEZcHCPacWq7Q+lz3ak
xOz7H11Ege4S6jysgR5OmMfQdG0kiasnM1R8ELklQnzm8tqLxUaZAYWOXtm8en2L
bQFLqcJHa59iruPQlMHWng7dhe3j4fJT3Mojll/YjnOCi84++zvII3SqU7y0sj6O
8H4uYmrQEdZqe+OVsZ88vv3EMgaWpLtK5+DhfF/MLIK0qgsJogRqFrA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV7nHWllUbDtFGdHxUmO
JCMYUb6M0fxSa4kRhlb+ko3F8L0DVdnph+q+sIrEziVxL+xJHF0jwA3o4RpPPI7w
7PDPxAs0sIlj4sD3kle2Y2CIHhRNN7nuQGKVKeuiestD3Tp5SCpGK5jVVLSvoDqE
hEZKMk1BEyn1C/zh8z1e/Y1GNKfUZCPErCgM8GRohZi9abjLnMWcPAA8GLCPZOFb
YA4Is1V4KNuO6W1qSZ09nWIADwiYU36E7QtNM0lU+EfR6PWtY9sygzljgTZCtPzL
jILKJ3My/UOQi7MazAaZHm/iJx+4Y7AoGfT2weSimtAVCxQnd9QqrL4oOb6acJ1c
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16188457073686926252226933010489350919
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprofitcentral.amazon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20371165410732357864585990695328963494658224210417743190641757123070050813287039812546582783979599819324757760651919572051296518668773597425792625304726310200567371035224542734326093853130214315156640342355409474252871365309085969520877726780085122841262860431872964317612113936862815958666482018329526195119894745536256132662394837529351438916974330268689720311469942412657731229255541071982693028131870896375127819817140806331526466624860607065043031078932224851407651083941211819357885663195038416124159575968020453414761468693131740857392912125602982405655929352486006942228485005198463158075990391809183680650449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							051ba1f9d9ef39eddb25fd09f3842e5695797dc4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1887 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofitcentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sothebys.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonservices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'localamazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamesstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.livebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toronto.amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warehouse-deals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofit.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yourstore.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booksurgepages.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amapedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livebid.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaidian.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.localamazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honoursystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebid.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gregmanning.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.filmfinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliate-blog.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filmfinders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorsystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.booksurgepages.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonservices.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamesstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requestor.mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honorsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires-blog.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazondcn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehouse-deals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamestudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.honoursystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamesstudios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orgcentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charities.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazonlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feeds.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgs.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livebid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mechturk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fba.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprofits.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazongamestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazonlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warehousedeals.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organization.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamestudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'honorsystem.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechturk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazongamesstudio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprofits.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebysauction.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associates-blog.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.charitycentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orgcentral.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'requester.mturk.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kdp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner-blog.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshops.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouver.amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mechanicalturk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fba.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vancouver.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnerprogramm-blog.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ats.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nonprofit.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.organizations.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebyssearch.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organizations.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sothebys.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gregmanning.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fba.amazon.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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